518c5a69231dc87391896be44c5f7c9d36ec375d4c2878b6783869cce8da1133

Analysis

max time kernel
2829714s
max time network
139s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
22/12/2023, 13:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Superuser.apk
Size

191KB
MD5

4ec9e96986478cb000f9d58f374f39f5
SHA1

7479e11f4df198c743bd430ef54f94999690c73b
SHA256

df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e
SHA512

66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9
SSDEEP

3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.noshufou.android.su

com.noshufou.android.su
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4622

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.noshufou.android.su/databases/permissions.sqlite

Filesize
28KB

MD5
ed3642dc02e32ee0717b198e0155d9de

SHA1
7f6d15ed68cf23926d9a1f58c28acb2f67a51708

SHA256
fd30dac074612220ba2e9634167116c2cc10471f951d1d6ffa0a7981c5dcd028

SHA512
12335e2d587a8b553b9bcac6e72d6b1c44bcba74b7dc50371cd96ea6f96a14ddb5df02d819821d82af682ac48d6226bc4c337a91c58980d341dd7dd87e091c41

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
512B

MD5
99f92e859b5935b7bf930fb51aabf393

SHA1
f56e66b4391f3147d60e8f09b61bb655ae2c1a98

SHA256
023d702f06881a60b48e2abe61e668928a553a561198416fbfe8e527fc3db76b

SHA512
c1cb17b3772d45d8f0e3ff05964d32844334a52ca3dcc9e36c5d2d167d9e787db363439ba9dfe442388469d83b2d63378f9db2a31a4d5b2bc65e30bfafc901bc

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
fa430bd7bd1da07977ef5602a9decc87

SHA1
b72c440b803ce741f14d6f22d76be97892017cd9

SHA256
6aed9d1db2542bff82868ea5851a9f402a14507f9a96487c8fb8d27ba23668ca

SHA512
61765b1cb66963bd6dc3166b6b0081c6b3f8858ff9a644465207fc80adcbf4cdf9faf3defa7dce17cc8b1b748e0a08e3fb146fa7ff206f470bcc16ae437ab0b2

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
14dd92a5154ce48fa296f16c71e03394

SHA1
1db2c49f332df9764a93d4cf79628cd00fe1cb1d

SHA256
d28d6ef40879556c6f323021ba0e3cccec0b2e3097307c9b4e23ebe92240c1df

SHA512
a73ef1a9bc32f334161e2afb02fe28a49d9f104e3fead33539308640965db1c04bbb77f0644f79673a238bb06c33a0edfa40aa6f07bc9746dfd00d4f893379c6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads